$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: hvSSiLF+epYGJnJ9js08YFH3h5rN2zSfaXrN7rfvO0A= Subject key identifier: 7C:7D:AF:A4:CE:4C:1D:EF:77:9B:6C:50:96:14:6F:3F:D1:8A:CF:90 Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 75852372449EF0F62FB3429D0ECB095A3A156691 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 02CF Signing time: Thu 21 Aug 2025 17:12:19 +0000 Manifest this update: Thu 21 Aug 2025 17:07:19 +0000 Manifest next update: Mon 25 Aug 2025 03:32:19 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: +V+/qjhwm29EiwDFztJr5h5AncsKd+ps+CYyhck9sjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:85:23:72:44:9e:f0:f6:2f:b3:42:9d:0e:cb:09:5a:3a:15:66:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Aug 21 17:07:19 2025 GMT Not After : Aug 25 03:32:19 2025 GMT Subject: CN=7C7DAFA4CE4C1DEF779B6C5096146F3FD18ACF90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:f6:1e:0e:15:24:8f:57:09:5e:9b:23:ab: 3b:72:3a:fe:80:f1:b1:2d:8c:2f:9f:65:98:c5:11: 5d:ec:39:f3:28:fb:32:11:78:4a:e2:c9:7b:94:89: 94:dd:bb:2a:6b:d1:2c:67:6c:50:89:14:93:ad:36: 35:c3:0d:a4:be:f5:85:4b:c2:61:25:0c:c5:ba:87: 4a:41:0d:ba:19:b6:c0:60:92:35:18:f7:55:b4:e5: ea:74:9e:83:c5:a7:50:ed:58:7b:b4:75:72:a1:c8: 7d:bf:59:3b:39:8b:23:54:c6:44:07:5f:cc:4c:f7: bd:fa:03:65:4b:99:23:c9:ad:47:b3:86:f8:b8:7e: 8b:25:00:92:1b:2f:a1:fc:37:80:df:8c:03:ff:1f: df:81:e0:69:68:3a:6b:77:d9:fc:d0:69:9d:20:00: b3:ee:99:ae:16:0e:f5:a5:40:0a:06:a9:bf:b2:7b: 2c:98:08:69:74:10:d2:68:d0:67:52:e5:4a:d6:00: 0c:a2:34:56:71:37:c5:ae:f4:4d:75:07:3d:b3:5c: 54:cc:d5:34:5e:91:68:4f:5b:fb:d6:52:b2:c3:c5: 3e:1b:ec:f3:42:b2:af:74:fb:c8:b6:a2:cc:ac:8f: 83:cf:2e:c8:8d:1b:35:d3:33:fb:33:ff:71:1a:98: ea:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7D:AF:A4:CE:4C:1D:EF:77:9B:6C:50:96:14:6F:3F:D1:8A:CF:90 X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:4a:08:ee:f2:ab:af:f3:35:93:0e:65:28:9f:b2:0e:3e:7c: da:ca:4d:8f:04:b6:d4:76:5a:47:95:91:77:d1:a0:37:05:55: 4d:50:04:d9:3b:d0:30:a8:71:fb:c2:b9:e3:43:dd:72:d3:60: 59:3e:97:dc:43:e2:3c:df:b9:39:8f:6b:3a:18:bd:28:bc:ab: ff:d5:30:64:a3:1c:e7:48:d4:4e:4e:0b:25:ce:99:1a:2d:fe: 5f:3f:00:24:53:7b:28:5b:05:dd:02:09:aa:23:58:88:9f:f2: af:00:74:fb:92:62:d7:83:ba:5b:dd:db:df:dc:7c:4d:b2:e7: d9:0b:2e:ac:ed:02:3b:de:41:fd:c3:ff:6d:30:c8:17:f7:5d: 4e:1f:4e:69:41:f4:e7:8a:20:56:2b:3f:ec:5e:c3:a0:28:2c: ca:7a:a2:94:5d:bb:7a:9b:f8:9e:50:2a:cd:03:fd:53:58:6e: 76:02:e2:dd:40:11:9d:92:bd:8c:c1:74:f2:49:49:53:3f:16: f7:68:d4:eb:c2:f3:9d:62:a2:aa:1a:c5:98:1d:50:82:c0:71: 1d:65:12:94:ff:6c:1f:96:20:7f:3b:6e:ff:3d:66:7e:18:c7: 90:5e:c0:1b:31:13:39:cb:5f:0b:7f:3e:17:8e:b3:8d:c6:2d: b0:25:a6:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYUjckSe8PYvs0KdDssJWjoVZpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNTA4MjExNzA3MTlaFw0yNTA4MjUwMzMyMTlaMDMxMTAvBgNV BAMTKDdDN0RBRkE0Q0U0QzFERUY3NzlCNkM1MDk2MTQ2RjNGRDE4QUNGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9/YeDhUkj1cJXpsjqztyOv6A 8bEtjC+fZZjFEV3sOfMo+zIReEriyXuUiZTduypr0SxnbFCJFJOtNjXDDaS+9YVL wmElDMW6h0pBDboZtsBgkjUY91W05ep0noPFp1DtWHu0dXKhyH2/WTs5iyNUxkQH X8xM9736A2VLmSPJrUezhvi4foslAJIbL6H8N4DfjAP/H9+B4GloOmt32fzQaZ0g ALPuma4WDvWlQAoGqb+yeyyYCGl0ENJo0GdS5UrWAAyiNFZxN8Wu9E11Bz2zXFTM 1TRekWhPW/vWUrLDxT4b7PNCsq90+8i2osysj4PPLsiNGzXTM/sz/3EamOqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfH2vpM5MHe93m2xQlhRvP9GKz5AwHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRKCO7yq6/zNZMOZSifsg4+fNrKTY8EttR2 WkeVkXfRoDcFVU1QBNk70DCocfvCueND3XLTYFk+l9xD4jzfuTmPazoYvSi8q//V MGSjHOdI1E5OCyXOmRot/l8/ACRTeyhbBd0CCaojWIif8q8AdPuSYteDulvd29/c fE2y59kLLqztAjveQf3D/20wyBf3XU4fTmlB9OeKIFYrP+xew6AoLMp6opRdu3qb +J5QKs0D/VNYbnYC4t1AEZ2SvYzBdPJJSVM/Fvdo1OvC851ioqoaxZgdUILAcR1l EpT/bB+WIH87bv89Zn4Yx5BewBsxEznLXwt/PheOs43GLbAlpgc= -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:24 2025 by rpki-client